Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: pSZCcJT184jQCdMiyfyLtR5whzhvacSzswWgvma2+P8=
Subject key identifier: B8:F5:1D:8E:FE:BD:DD:71:F0:DA:C0:20:44:46:EF:FC:85:53:12:6C
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 0198D6CDC32EF629132D860333CBEC5D6AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 12:01:05 +0000
Manifest this update: Sat 23 Aug 2025 12:01:05 +0000
Manifest next update: Sun 24 Aug 2025 12:01:05 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: tbZw3huAJ2kWIemwmup1nPoU1eHat1IR2hi3KoQZg24=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c3:2e:f6:29:13:2d:86:03:33:cb:ec:5d:6a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Aug 23 12:01:05 2025 GMT
Not After : Aug 24 12:01:05 2025 GMT
Subject: CN=b8f51d8efebddd71f0dac0204446effc8553126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:d3:e8:c0:08:0a:ce:4d:50:e2:04:62:99:
7d:fa:d5:53:2e:2f:49:28:f7:3d:dd:3e:62:e6:0c:
a4:a4:cf:6e:99:e7:7c:db:31:c8:7e:68:71:ff:60:
27:36:67:49:49:37:dc:0a:21:37:09:ba:6f:be:ab:
b1:ae:fc:e1:bb:80:49:d7:12:c4:78:7c:3c:54:01:
5b:e0:61:55:a7:c5:6e:8e:93:7b:f1:81:39:7e:d4:
a7:da:c0:58:12:c2:5a:66:d1:d2:be:15:9c:36:43:
98:be:26:95:a4:8f:89:55:7e:18:08:29:71:4b:09:
2d:2e:c5:41:bd:bd:e7:dc:79:3c:21:5a:0c:33:f9:
a3:ae:7a:92:b1:99:3e:ea:7f:a1:01:2b:23:ae:8e:
3f:67:bf:fd:eb:a7:20:d0:10:ac:ca:d8:5b:63:a4:
dc:dd:3d:37:17:76:92:88:96:f6:fb:56:3f:fc:33:
b4:cc:f8:0f:67:27:8f:94:64:41:60:45:53:ef:2d:
df:8f:b8:91:e1:14:08:17:46:7d:d5:e4:40:d2:81:
dd:2f:a1:e0:ad:36:db:41:e9:0d:64:90:16:44:30:
c7:38:61:ec:02:70:3d:c0:15:3d:cd:64:a7:15:62:
20:5a:11:d0:6e:c3:d9:8f:da:b6:94:dc:99:54:8d:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:1D:8E:FE:BD:DD:71:F0:DA:C0:20:44:46:EF:FC:85:53:12:6C
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:84:b4:76:c9:5c:28:0f:39:d3:b5:41:ca:b6:31:51:7a:de:
50:0f:a4:4b:fa:e6:e4:7c:ea:2b:62:00:4a:ea:0b:a5:b2:63:
e9:1e:03:34:67:af:53:58:57:54:c0:6f:f2:a1:ca:95:d2:8f:
5b:28:95:15:a1:01:2b:32:b6:a5:06:db:5a:e2:f4:4b:c0:8f:
5c:5e:dc:5c:03:9c:9c:e0:0c:af:ee:46:77:78:01:29:14:94:
4e:2e:f8:0d:a7:6c:4b:c9:e2:6f:32:4d:77:f5:ef:ac:56:d2:
ba:27:0c:00:2e:bd:02:eb:bf:d9:f6:b9:1c:bc:96:ce:b7:79:
8b:ad:6f:2c:74:0b:6d:d0:4c:d0:4a:ec:88:10:33:b4:99:a3:
7f:69:7c:04:09:d9:f5:13:28:b7:f0:65:80:18:35:58:99:4b:
38:cc:58:3b:87:a9:5e:3d:81:54:95:66:4c:25:ee:7f:06:70:
73:01:ca:d0:10:21:2a:24:19:f0:70:7b:1f:0f:3c:e1:c0:7f:
7e:01:51:bc:e5:54:0d:05:e0:b5:df:7f:fe:19:e5:0b:76:1c:
eb:c3:da:89:6b:39:80:92:32:c0:7f:a0:ce:80:92:bc:f0:02:
d7:df:75:47:10:c6:93:38:4d:6a:d9:2a:ff:f1:d1:db:ec:4a:
27:cd:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:45 2025 by rpki-client